Katie Nickels

CYBERWARCON

CYBERWARCON is coming!!! Registration and CFP are now open for this year's #CYBERWARCON! This year's keynote speaker will be @dmitri.silverado.org!!
We are back in Arlington, VA this year on November 19th.

www.cyberwarcon.com

TIL about ASPs (App-Specific Passwords) thanks to Rebekah and her Citizen Lab colleagues...check it out! citizenlab.ca/2025/06/russ...

Excited to be here at @sleuthcon.bsky.social! I've taken a step back from social media, so it will be nice to say hi to some of you in person. 😀 Looking forward to a great day, kicking off with Paul Melson.

[Webinar] The Detection Series: Initial Access We explore the Initial Access MITRE ATT&CK® tactic, with a focus on emergent, novel, and prevalent adversary techniques and capabilities.

As you're planning your week, be sure to sign up for our Red Canary webinar on initial access to hear about common adversary techniques and what to do about them. redcanary.com/resources/we... Don't miss it!

💰🐍THE SLEUTHCON 2025 LINEUP IS NOW LIVE🐍💰

From cybercrime units and big-box threat teams to red teamers and deception engineers—this year’s speaker lineup spans the full spectrum of financially motivated threat hunting, intel analysis, and response.

www.sleuthcon.com/2025lineup

New keynote drop: Paul Melson is taking the SLEUTHCON stage to dissect the rise of crime[ware]—how it started, how it scaled, and how we shut it down.
23+ yrs defending networks. ScumBots founder. Now VP @ Capital One.
🎤 June 6
📍IRL + virtual
🎟️ Tix moving fast - sleuthcon.com
🗓️ CFP closes April 18

An ampersand eating a waffle. As one does.

Today we're launching a new system where the public can help us develop the next ATT&CK release through Macrotechnique Refinement. To start refining FUZZYSNUGGLYDUCK, click here: attack.mitre.org/macro-techni.... Fabulous prizes await success.

Japan CERT researchers look at the multitude of North Korean APT groups and the problem of classifying most of their activity as Lazarus

blogs.jpcert.or.jp/en/2025/03/c...

[Webinar] Inside the 2025 Threat Detection Report Join the 2025 Red Canary Threat Detection Report’s authors as they explore the most important findings of the year. Don't miss this event!

Don't miss my teammates as they present the 2025 Red Canary Threat Detection Report tomorrow afternoon! This report is overwhelming with goodness, and they'll help you navigate it. 😀 redcanary.com/resources/we...

💼 Join us on Wednesday! Our thorough review includes assessment of formatting, content clarity and alignment with industry standards!

www.blacksincyberconf.com/online-commu...
⁠
#BlacksInCyber #BlacksInCybersecurity #LitLikeBIC #CareerServices

You're human, and we all say human things sometimes. Please be kind to yourself and cut yourself some slack. ❤️

Interview tip: always, always come prepared with thoughtful questions to ask your interviewers. These questions are often a key factor in me recommending for or against a hire - they tell me a lot about someone's preparedness for the interview and genuine interest in the role.

Happy Valentine's Day everyone! Thank you for this @selenalarson.bsky.social ❤️

🚨 EclecticIQ analysts uncovered a Sandworm #cyber espionage campaign targeting Ukrainian Windows users. Attackers used trojanized #Microsoft KMS activation tools to deploy the BACKORDER loader and Dark Crystal RAT, enabling data theft and espionage. blog.eclecticiq.com/sandworm-apt...

Great presentation, thank you for speaking!

Haha same...still figuring this out! Glad there are a few of us :)

📆 It's crime time!

#SLEUTHCON is coming to Arlington, VA on Friday, June 6th, 2025! 🎉

Stay tuned for more information.

Red Canary Office Hours: Weekly trends in security operations Got a burning question? Bring it. Want to stay ahead of attackers? Listen in. This is your open forum for all things security operations.

Do you have teammates you go to when you need a grounded perspective on some new security topic? Keith McCammon and Dave Farrow are two of these people for me. Now you can benefit from their wisdom as well! Join them starting next Tuesday for Red Canary Office Hours. redcanary.com/resources/we...

Glad you like it! ❤️ Assumptions like that are so annoying.

What's the story you're telling yourself about why you can't separate from work? When can you say I'm NOT available? Such good advice from Dr. Daniel Shore. #CTISummit

We're kicking off Day 2 of the #CTISummit with a keynote by Dr. Daniel Shore on mental health and burnout - an issue we all need to pay attention to. He's kicking off with an example from his own life around summer camp.

This is a fantastic visual from Tom and Lior that shows how complicated it is to cluster intrusions #CTISummit

Cloudflare verification is an anti-sandbox technique... pretty clever #CTISummit

Quishing is coming when, @attack.mitre.org? 😀 #CTISummit

Interesting example from Arda of cyber criminals changing their branding after public exposure by Mandiant. #CTISummit

Dr. Johnson shared a new acronym to me: STRAT. This is a model of the Swedish nuclear system created by a student. This is accessible! The starting point is to choose a threat that can come at the system. #CTISummit

Well this is a fun throwback ;)

I'm excited to be here to kick off the 13th SANS #CTISummit with a keynote by Dr. Jeannie Johnson on anticipatory intelligence!

We're just two weeks away from the SANS CTI Summit, one of my favorite conferences of the year! I've seen several presentation drafts, and they are 🔥. Register today to join Live Online (free!) or in-person in Alexandria, VA!
➡️ Register: sans.org/u/1xCe